CVE Catalog

CVE-2023-34473

MediumCVSS 6.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

32th percentile - higher than 32% of all known CVEs

Summary

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Risk Assessment

The organization may be exposed to serious data security threats, potentially leading to unauthorized access and financial losses.

Recommendation

It is recommended to review and update the BMC configuration to eliminate hard-coded credentials and implement stronger authentication mechanisms.

Original NVD description (English source)

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS